A vulnerability, which was classified as critical, was found in Apache Shiro up to 2.0.6. This affects an unknown part. Executing a manipulation can lead to authorization bypass.
This vulnerability is tracked as CVE-2026-23903. The attack can be launched remotely. No exploit exists.
You should upgrade the affected component.
